DBACOCKPIT ERROR: BR0187E Value 4 of parameter/option 'cleanup_disk_archive/-i' smaller than 10 for 'audit_sys_operations=true'

[Former Member]

I am facing error in Production after upgrading the BRTOOLS to 7.20 (27), the lastest package at service market place.THe cleanup job is failing in DBACOCKPIT.

Cleanup job Erro.txt.zip

[Former Member · Accepted solution]

Try to set cleanup_disk_archive and cleanup_disk_backup parameters to 10 or disable audit_sys_operations if appropriate.

"The are several ways to cleanup the audit trail:

• You can use BRCONNECT (see SAP note 1551504).
  
  OS> brconnect -u / -f cleanup
  
  BRCONNECT does not allow to cleanup audit records that are younger than 10 days if audit_sys_operations = TRUE. With this BRCONNECT security mechanism it is not possible for malicious administrators to delete their tracks from the audit trail (SAP BR*Tools 7.20 Patch level 24 and higher)."

Regards

Roman

[premsukh_bishnoi · Accepted solution]

Hello,

"This error messages has something to do with setting/activating the

Oracle parameter "audit_sys_operations". If this parameter is set

BRCONNECT assumes that the DBA actions must obey higher auditing

requirements. It tries to prevent then that the BR*Tools log files

(which document these actions) will be immediately deleted! They must

not be deleted for at least 10 days to allow auditing these actions.

But we see a small problem here. BRCONNECT should prevent the deleting

of the log files but not of the backup files"

Please update BRtool to atlest patch 28 so it will resolve your issue.

Regards, Premsukh

[premsukh_bishnoi · Accepted solution]

Hello,

"This error messages has something to do with setting/activating the

Oracle parameter "audit_sys_operations". If this parameter is set

BRCONNECT assumes that the DBA actions must obey higher auditing

requirements. It tries to prevent then that the BR*Tools log files

(which document these actions) will be immediately deleted! They must

not be deleted for at least 10 days to allow auditing these actions.

But we see a small problem here. BRCONNECT should prevent the deleting

of the log files but not of the backup files"

Please update BRtool to atlest patch 28 so it will resolve your issue.

Regards, Premsukh

[Former Member · Accepted solution]

I mean I did upgrade the BRTOOLS to 28 but still have that issue log parameter in cleanup log. So I don't have problem to delete the logs in 10 days. The only issue I had was backup and archive to delete in 2 days old cause new backup. The BRTOOLS 28 did fixed that two parameter and for now is good to go. I did talk to SAP regarding that, they are trying to fix that issue fully when they will do. They will release new Patch I guess 29.